{"id":42245,"date":"2026-05-23T11:09:43","date_gmt":"2026-05-23T09:09:43","guid":{"rendered":"https:\/\/www.cloudmagazin.com\/2026\/05\/24\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/"},"modified":"2026-06-22T18:29:38","modified_gmt":"2026-06-22T16:29:38","slug":"google-gemini-in-the-enterprise-what-the-ai-act-mandates","status":"publish","type":"post","link":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/","title":{"rendered":"Google Gemini in the Enterprise: What the AI Act Mandates"},"content":{"rendered":"<p style=\"color:#0bb7fd;font-size:0.9em;margin:0 0 16px;padding:0;\">8 min read<\/p>\n<p><strong>Google Gemini has arrived in the enterprise cloud, and the AI Act has come into effect. Those building inference pipelines without accounting for general-purpose AI model obligations are building architectures that will fail during audit.<\/strong><\/p>\n<div style=\"background:#004a59;color:#fff;padding:32px 36px;margin:32px 0;border-radius:8px;\">\n<p style=\"margin:0 0 18px 0;font-size:0.95em;font-weight:800;text-transform:uppercase;letter-spacing:0.2em;color:#0bb7fd;border-bottom:2px solid rgba(11,183,253,0.25);padding-bottom:12px;\">Key Takeaways<\/p>\n<ul style=\"margin:0;padding-left:22px;color:rgba(255,255,255,0.92);line-height:1.6;\">\n<li style=\"margin-bottom:12px;\"><strong style=\"color:#0bb7fd;\">AI Act obligations are not a GDPR extension. General-purpose AI models have their own transparency, documentation, and risk obligations. A DPA with Google does not cover them.<\/strong><\/li>\n<li style=\"margin-bottom:12px;\"><strong style=\"color:#0bb7fd;\">Vertex AI is not automatically compliant. The managed service simplifies logging and region pinning, but leaves model cards, use-case evaluations, and Fundamental Rights Impact Assessment (FRIA) to the client&#8217;s responsibility.<\/strong><\/li>\n<li><strong style=\"color:#0bb7fd;\">Self-hosted Gemma costs GPU hours plus cluster overhead. Those deploying Gemini via Model Garden on their own GPUs take on compliance overhead and ongoing GPU OPEX. It only pays off at significant volume.<\/strong><\/li>\n<\/ul>\n<\/div>\n<p style=\"font-size:0.88em;color:#666;margin:20px 0 32px 0;border-top:1px solid #e5e5e5;border-bottom:1px solid #e5e5e5;padding:10px 0;\"><span style=\"color:#004a59;font-weight:700;text-transform:uppercase;font-size:0.72em;letter-spacing:0.14em;margin-right:14px;\">Related:<\/span><a href=\"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/18\/android-17-pushes-gemini-under-the-operating-system\/\" style=\"color:#333;text-decoration:underline;\">Android 17 integrates Gemini into the OS<\/a>&nbsp;&nbsp;<span style=\"color:#ccc;\">\/<\/span>&nbsp;&nbsp;<a href=\"https:\/\/www.cloudmagazin.com\/en\/?p=41667\" style=\"color:#333;text-decoration:underline;\">EKS 1.36 becomes expensive without FinOps discipline<\/a><\/p>\n<h2 style=\"margin-top:64px;margin-bottom:20px;padding-top:16px;\">How Google Gemini Changes Regulatory Requirements in the Enterprise Cloud<\/h2>\n<p><strong>What is an AI Act-compliant inference architecture? An inference architecture is AI Act-compliant if it technically implements the obligations from the EU AI Act for general-purpose AI models and high-risk applications. This includes model transparency, logging of inputs and outputs in regulated use cases, risk assessment per use case, Fundamental Rights Impact Assessment for public authorities, and clear separation between training and inference data.<\/strong><\/p>\n<p>The AI Act addresses Google Gemini not as a product but as a general-purpose AI model. Obligations apply to both the provider and the deployer. Google is the provider. The deployer is any company using Gemini in a specific use case. This shifts part of the responsibility back to DACH cloud teams consuming the model. During an audit, saying &#8220;Google is responsible&#8221; is insufficient. Those calling the model must categorize, document, and classify the call into a risk category.<\/p>\n<p>This is not theoretical. The first fine proceedings are underway, and EU AI Office publications are explicit. Those planning inference architectures without AI Act considerations are setting themselves up for fines.<\/p>\n<h2 style=\"margin-top:64px;margin-bottom:20px;padding-top:16px;\">Where Vertex AI Simplifies Compliance and Where It Doesn&#8217;t<\/h2>\n<p>Vertex AI is Google&#8217;s managed inference platform for Gemini models. It automatically solves three issues: region pinning to EU locations, logging via Cloud Audit Logs, and contractual standard clauses in the Data Processing Addendum. What Vertex AI doesn&#8217;t solve: model transparency for your specific use case, risk classification against the AI Act, and Fundamental Rights Impact Assessment for high-risk applications.<\/p>\n<p>This means: An HR application using Gemini for resume screening is a high-risk application under Annex III of the AI Act. Vertex AI doesn&#8217;t provide this classification. The deployer must do it themselves, ensure logging of model decisions per application, and document false positive and false negative rates. If regulators ask, &#8220;Vertex AI logs all this&#8221; isn&#8217;t enough.<\/p>\n<figure style=\"margin:36px 0;padding:0;\">\n<blockquote style=\"position:relative;margin:0;padding:30px 34px 28px;background:linear-gradient(135deg,#013a47 0%,#004a59 100%);border-radius:12px;box-shadow:0 10px 30px rgba(0,40,60,0.18);overflow:hidden;\"><p>\n<span aria-hidden=\"true\" style=\"position:absolute;right:22px;top:6px;font-family:Georgia,serif;font-size:90px;line-height:1;color:#0bb7fd;opacity:0.18;\">&rdquo;<\/span><\/p>\n<div style=\"font-family:'SF Mono','Monaco','Consolas',monospace;font-size:10.5px;color:#0bb7fd;letter-spacing:0.18em;text-transform:uppercase;margin-bottom:13px;\">\/\/ Key point<\/div>\n<p style=\"margin:0;font-size:1.15em;line-height:1.6;color:#f2fafd;font-weight:500;position:relative;\">Vertex AI provides the infrastructure; the AI Act requires classification. Only the deployer can fill the gap.<\/p>\n<\/blockquote>\n<\/figure>\n<h2 style=\"margin-top:64px;margin-bottom:20px;padding-top:16px;\">Self-Hosted Gemini Endpoints: When They Make Sense<\/h2>\n<p>Google offers Gemini models in several variants, including open model families like Gemma 2 and 3 and proprietary endpoints that only run in Vertex AI. Self-hosted is therefore not a one-to-one choice. For Gemma variants, there are genuine on-premises paths via Triton Inference Server or vLLM on your own GPUs. For the proprietary Gemini Pro classes, this doesn&#8217;t exist\u2013they remain bound to Vertex.<\/p>\n<p>The question of &#8220;self-hosted or managed&#8221; thus reduces for most workloads to Gemma. For proprietary models, only Vertex remains, and the compliance question shifts to the endpoint setup in the project: region, logging, IAM bindings, audit trail.<\/p>\n<div style=\"overflow-x:auto;-webkit-overflow-scrolling:touch;margin:16px 0 32px 0;\">\n<table style=\"width:100%;min-width:560px;border-collapse:collapse;font-size:0.95em;\">\n<thead>\n<tr style=\"background:#004a59;color:#fff;\">\n<th style=\"padding:12px 16px;text-align:left;border:1px solid #004a59;\">Dimension<\/th>\n<th style=\"padding:12px 16px;text-align:left;border:1px solid #004a59;\">Vertex AI Managed<\/th>\n<th style=\"padding:12px 16px;text-align:left;border:1px solid #004a59;\">Self-Hosted Gemma on GKE<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\"><strong>Pricing Model<\/strong><\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\">Per token, starting at around 0.3 cents per 1,000 output tokens for Gemini Flash, significantly higher for Gemini Pro<\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;color:#004a59;font-weight:600;\">GPU hourly rate plus cluster overhead, starting at around 3 Euro per H100 hour on-demand<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\"><strong>Compliance Effort<\/strong><\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\">Region and logging out-of-the-box, AI Act classification at customer end<\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;color:#004a59;font-weight:600;\">Complete compliance pipeline at customer end, no vendor logging<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\"><strong>Model Portfolio<\/strong><\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\">Published by Google, to be classified by deployer<\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;color:#004a59;font-weight:600;\">Gemma model portfolio plus own custom tuning documentation<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\"><strong>Data Sovereignty<\/strong><\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\">Region pinning to EU, government access possible under US law<\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;color:#004a59;font-weight:600;\">Full control, provided GPU provider isn&#8217;t subject to US legal jurisdiction<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\"><strong>Worthwhile From<\/strong><\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\">Immediately, for most use cases<\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;color:#004a59;font-weight:600;\">From around 10 million tokens per day or with clear data sovereignty requirements<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p style=\"font-size:0.8em;color:#888;margin-top:8px;\">Source: Google Cloud pricing pages and own analysis of hyperscaler GPU prices as of May 2026.<\/p>\n<p>In practice, the self-hosted path rarely pays off below 10 million tokens per day. Below this threshold, the additional work for DevOps, MLOps and compliance costs more than the extra token costs with Vertex. Above this threshold, the ratios flip, especially when data sovereignty is required or specific tuning paths that Vertex doesn&#8217;t allow become necessary.<\/p>\n<h2 style=\"margin-top:64px;margin-bottom:20px;padding-top:16px;\">The Five AI Act Obligations That Must Be Addressed in Every Gemini Architecture<\/h2>\n<div style=\"margin:28px 0;border:1px solid #e5e5e5;border-radius:6px;overflow:hidden;\">\n<div style=\"background:#004a59;color:#fff;padding:12px 18px;font-size:0.78em;font-weight:700;text-transform:uppercase;letter-spacing:0.14em;\">Obligation Clusters for the Deployer<\/div>\n<div style=\"padding:8px 0;\">\n<div style=\"display:flex;gap:18px;padding:12px 20px;border-bottom:1px solid #f0f0f0;\">\n<div style=\"min-width:130px;font-weight:700;color:#0bb7fd;\">Risk Class<\/div>\n<div style=\"color:#333;line-height:1.55;\">Each use case is assigned to a class: prohibited, high-risk, transparency-obligated, minimal risk. This classification is a prerequisite for all subsequent obligations.<\/div>\n<\/div>\n<div style=\"display:flex;gap:18px;padding:12px 20px;border-bottom:1px solid #f0f0f0;\">\n<div style=\"min-width:130px;font-weight:700;color:#0bb7fd;\">Logging<\/div>\n<div style=\"color:#333;line-height:1.55;\">For high-risk applications, at least six months; in the financial industry or healthcare, longer. Inputs, outputs, model versions, and confidence values must be preserved.<\/div>\n<\/div>\n<div style=\"display:flex;gap:18px;padding:12px 20px;border-bottom:1px solid #f0f0f0;\">\n<div style=\"min-width:130px;font-weight:700;color:#0bb7fd;\">FRIA<\/div>\n<div style=\"color:#333;line-height:1.55;\">Fundamental Rights Impact Assessment for public entities and regulated sectors. This assessment is created before production deployment and updated before any changes.<\/div>\n<\/div>\n<div style=\"display:flex;gap:18px;padding:12px 20px;border-bottom:1px solid #f0f0f0;\">\n<div style=\"min-width:130px;font-weight:700;color:#0bb7fd \/>Transparency<\/div>\n<div style=\"color:#333;line-height:1.55;\">When users interact with AI or view AI-generated content, this must be disclosed. Synthetic content must be clearly labeled; watermarked content is the state of the art.<\/div>\n<\/div>\n<div style=\"display:flex;gap:18px;padding:12px 20px;\">\n<div style=\"min-width:130px;font-weight:700;color:#0bb7fd \/>Monitoring<\/div>\n<div style=\"color:#333;line-height:1.55 \/>Model drift, bias indicators, and error rates are continuously measured. The responsibility for this lies not with Google, but with the deployer.<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p>These five obligations can be technically addressed, but not without effort. Logging is the cheapest discipline; FRIA and risk classification are the most expensive, as they require legal involvement. An inference architecture that does not incorporate these obligations into its setup will face pressure to add them later.<\/p>\n<h2 style=\"margin-top:64px;margin-bottom:20px;padding-top:16px;\">Why GPU Costs Drive Architectural Decisions<\/h2>\n<div style=\"background:#004a59;color:#fff;text-align:center;padding:40px 24px;margin:32px 0;border-radius:8px;\">\n<div style=\"font-size:3.4em;font-weight:800;color:#0bb7fd;letter-spacing:-0.03em;line-height:1;\">\u20ac3.80<\/div>\n<div style=\"font-size:1em;color:rgba(255,255,255,0.88);margin-top:12px;max-width:520px;margin-left:auto;margin-right:auto;line-height:1.5;\">This is the cost of an H100 hour on-demand on GKE in European regions. For a 24\/7 setup with high availability, this amounts to a six-figure GPU OPEX per year\u2013before cluster overhead and personnel costs are factored in.<\/div>\n<div style=\"font-size:0.78em;color:rgba(255,255,255,0.5);margin-top:12px;\">Source: Google Cloud Pricing Page, On-Demand List Prices May 2026.<\/div>\n<\/div>\n<p>Anyone hosting Gemma on their own purchases GPU capacity that must never fail. An H100 as a single node is not a productive architecture. High availability requires at least three nodes in two zones, backup capacity for training and tuning runs, and a load balancer with affinity. The nominal \u20ac3.80 per hour effectively becomes \u20ac6\u20138 in real production, depending on utilization.<\/p>\n<p>That\u2019s not wrong\u2013it\u2019s just expensive. Those who run a clear inference workload with six- to seven-figure token numbers per day can consider the self-hosted path. Those who start experimentally can go with Vertex faster and cheaper, gaining time to establish the compliance foundation before the GPU question is decided.<\/p>\n<h2 style=\"margin-top:64px;margin-bottom:20px;padding-top:16px;\">What DACH Cloud Teams Must Anchor in the Next Six Months<\/h2>\n<p>Three key decisions determine whether a company\u2019s Gemini integration complies with the AI Act. First: a use-case inventory, with risk classification for each application, documented and readily accessible during audits. Second: a platform decision\u2013whether Vertex AI serves as the default or if certain use cases are offloaded to self-hosted Gemma. Third: a responsibility matrix that clearly delineates what Google delivers and what the deployer is accountable for.<\/p>\n<p>Without these three foundational decisions, an architecture emerges that expands in response to every new requirement, without the underlying compliance framework keeping pace. This is the most common source of failure. Those who establish these parameters before implementing the second use case build a robust foundation; those who delay end up rebuilding later.<\/p>\n<h2 style=\"padding-top:64px;margin-bottom:20px;\">Frequently Asked Questions<\/h2>\n<details>\n<summary><strong>Is Vertex AI\u2019s EU Data Location Sufficient for GDPR Compliance?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">The EU data location is a necessary but not sufficient condition. As a U.S.-based company, Google remains subject to the CLOUD Act, necessitating additional contractual and technical safeguards. Standard Contractual Clauses combined with encryption using customer-managed keys via Cloud KMS or an External Key Manager represent the standard approach. Without these supplementary measures, GDPR compliance for sensitive data remains vulnerable.<\/p>\n<\/details>\n<details>\n<summary><strong>Which Gemini Use Cases Are Classified as High-Risk Under the AI Act?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">Annex III of the AI Act specifically lists critical areas: critical infrastructure, education and vocational training, employment and personnel decisions, access to public services and social benefits, law enforcement, border control, and judicial administration. Deploying Gemini in any of these domains creates a high-risk application, triggering FRIA obligations, enhanced logging requirements, and mandatory reporting to authorities.<\/p>\n<\/details>\n<details>\n<summary><strong>Do Companies with Fewer Than 250 Employees Need to Comply with the AI Act?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">Yes\u2013the AI Act does not primarily differentiate based on company size but rather on the risk category of the specific use case. SMEs receive some relief regarding documentation requirements, yet core obligations still apply. Even a three-person startup using Gemini for preliminary applicant screening would be considered a high-risk application, subject to all associated duties.<\/p>\n<\/details>\n<details>\n<summary><strong>How Does the AI Act Differ from the GDPR in Logging Requirements?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">While the GDPR mandates a register of processing activities and audit logs for sensitive data, the AI Act additionally requires model activity logging\u2013including inputs, outputs, confidence scores, and version details\u2013to ensure transparency and traceability of AI-driven decisions. These obligations overlap but are not identical. Simply maintaining GDPR-compliant logging does not automatically meet AI Act requirements.<\/p>\n<\/details>\n<div style=\"margin:40px 0;padding:0;border-top:2px solid #004a59;\">\n<h3 style=\"margin:0;padding:16px 0 8px 0;font-size:0.78em;font-weight:700;text-transform:uppercase;letter-spacing:0.18em;color:#004a59;\">Editorial Reading Tips<\/h3>\n<ul style=\"list-style:none;margin:0;padding:0;\">\n<li style=\"padding:10px 0;border-bottom:1px solid #eee;\"><a href=\"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/18\/android-17-pushes-gemini-under-the-operating-system\/\" style=\"color:#1a1a1a;text-decoration:none;\">Android 17 pushes Gemini under the operating system<\/a><\/li>\n<li style=\"padding:10px 0;border-bottom:1px solid #eee;\"><a href=\"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/20\/finops-for-ai-inference-getting-a-grip-on-gpu-costs-in-multi-cloud\/\" style=\"color:#1a1a1a;text-decoration:none;\">FinOps for AI inference: Keeping GPU costs in multi-cloud under control<\/a><\/li>\n<li style=\"padding:10px 0;\"><a href=\"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/19\/platform-engineering-critical-infrastructure\/\" style=\"color:#1a1a1a;text-decoration:none;\">Platform Engineering is no longer just a DevEx project<\/a><\/li>\n<\/ul>\n<\/div>\n<div style=\"margin:40px 0 24px 0;\">\n<p style=\"margin:0 0 12px 0;font-size:0.78em;font-weight:700;text-transform:uppercase;letter-spacing:0.18em;color:#666;\">More from the MBF Media Network<\/p>\n<div style=\"padding:14px 18px;border-left:3px solid #F21F05;background:#fafafa;margin-bottom:6px;\">\n<div style=\"font-size:0.7em;font-weight:700;color:#F21F05;text-transform:uppercase;letter-spacing:0.12em;margin-bottom:4px;\">mybusinessfuture<\/div>\n<p><a href=\"https:\/\/mybusinessfuture.com\/wer-drei-tage-braucht-hat-den-lead-schon-verloren\/\" style=\"font-weight:600;line-height:1.4;color:#1a1a1a;text-decoration:none;\">If it takes three days, you\u2019ve already lost the lead<\/a>\n<\/div>\n<div style=\"padding:14px 18px;border-left:3px solid #d65663;background:#fafafa;margin-bottom:6px;\">\n<div style=\"font-size:0.7em;font-weight:700;color:#d65663;text-transform:uppercase;letter-spacing:0.12em;margin-bottom:4px;\">digital-chiefs<\/div>\n<p><a href=\"https:\/\/www.digital-chiefs.de\/dax-konzerne-verlieren-tech-talent-an-den-mittelstand\/\" style=\"font-weight:600;line-height:1.4;color:#1a1a1a;text-decoration:none;\">DAX corporations are losing tech talent to mid-sized companies<\/a>\n<\/div>\n<div style=\"padding:14px 18px;border-left:3px solid #69d8ed;background:#fafafa;\">\n<div style=\"font-size:0.7em;font-weight:700;color:#69d8ed;text-transform:uppercase;letter-spacing:0.12em;margin-bottom:4px;\">securitytoday<\/div>\n<p><a href=\"https:\/\/www.securitytoday.de\/2026\/05\/23\/nis2-trifft-cloud-act-wer-haftet-fuer-die-drittstaaten-luecke\/\" style=\"font-weight:600;line-height:1.4;color:#1a1a1a;text-decoration:none;\">NIS2 meets CLOUD Act: Who is liable for the third-country gap?<\/a>\n<\/div>\n<\/div>\n<p style=\"font-size:.8em;color:#888;margin-top:1.5em;\">Cover image: AI-generated (May 2026)<\/p>\n<p style=\"text-align: right;\"><em>Image source: AI-generated (May 2026), C2PA certificate embedded in the image<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"Google Gemini in the enterprise cloud meets the AI Act. Vertex AI only covers a part, the rest remains with the deployer.","protected":false},"author":31,"featured_media":42231,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_meta-robots-adv":"","_yoast_wpseo_canonical":"","_yoast_wpseo_opengraph-title":"","_yoast_wpseo_opengraph-description":"","_yoast_wpseo_opengraph-image":"","_yoast_wpseo_opengraph-image-id":0,"_yoast_wpseo_twitter-title":"","_yoast_wpseo_twitter-description":"","_yoast_wpseo_twitter-image":"","_yoast_wpseo_twitter-image-id":0,"pre_headline":"","bildquelle":"","teasertext":"","language":"de","_evm_slot_owner":"","_evm_translation_lang":"","featured_post":0,"featured_post_sortierung":0,"_wp_old_slug":[],"footnotes":""},"categories":[929,921],"tags":[],"industry":[],"class_list":["post-42245","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cm-guides","category-news"],"evm_reading_time_minutes":5,"wpml_language":"en","wpml_translation_of":41672,"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Google Gemini in the Enterprise: What the AI Act Mandates<\/title>\n<meta name=\"description\" content=\"Discover how Google Gemini aligns with the EU AI Act. Vertex AI covers region &amp; logging, while the Deployer handles risk class &amp; FRIA.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Google Gemini in the Enterprise: What the AI Act Mandates\" \/>\n<meta property=\"og:description\" content=\"Discover how Google Gemini aligns with the EU AI Act. Vertex AI covers region &amp; logging, while the Deployer handles risk class &amp; FRIA.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/\" \/>\n<meta property=\"og:site_name\" content=\"cloudmagazin\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cloudmagazincom\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-23T09:09:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-22T16:29:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/05\/google-gemini-im-unternehmen-was-der-ai-act-erzwingt-cover-hero-2.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1880\" \/>\n\t<meta property=\"og:image:height\" content=\"1058\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Alec Chizhik\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cloudmagazin\" \/>\n<meta name=\"twitter:site\" content=\"@cloudmagazin\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alec Chizhik\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/05\\\/23\\\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/05\\\/23\\\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\\\/\"},\"author\":{\"name\":\"Alec Chizhik\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#\\\/schema\\\/person\\\/ce38baaa19a580268aedce096597eb3c\"},\"headline\":\"Google Gemini in the Enterprise: What the AI Act Mandates\",\"datePublished\":\"2026-05-23T09:09:43+00:00\",\"dateModified\":\"2026-06-22T16:29:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/05\\\/23\\\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\\\/\"},\"wordCount\":885,\"publisher\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/05\\\/23\\\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/google-gemini-im-unternehmen-was-der-ai-act-erzwingt-cover-hero-2.jpg\",\"articleSection\":[\"Guides\",\"News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/05\\\/23\\\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\\\/\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/05\\\/23\\\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\\\/\",\"name\":\"Google Gemini in the Enterprise: What the AI Act Mandates\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/05\\\/23\\\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/05\\\/23\\\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/google-gemini-im-unternehmen-was-der-ai-act-erzwingt-cover-hero-2.jpg\",\"datePublished\":\"2026-05-23T09:09:43+00:00\",\"dateModified\":\"2026-06-22T16:29:38+00:00\",\"description\":\"Discover how Google Gemini aligns with the EU AI Act. Vertex AI covers region & logging, while the Deployer handles risk class & FRIA.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/05\\\/23\\\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/05\\\/23\\\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/05\\\/23\\\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/google-gemini-im-unternehmen-was-der-ai-act-erzwingt-cover-hero-2.jpg\",\"contentUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/google-gemini-im-unternehmen-was-der-ai-act-erzwingt-cover-hero-2.jpg\",\"width\":1880,\"height\":1058,\"caption\":\"KI-generiertes Beitragsbild: Google Gemini im Unternehmen: was der AI Act erzwingt\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/05\\\/23\\\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/home\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Google Gemini in the Enterprise: What the AI Act Mandates\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/\",\"name\":\"cloudmagazin\",\"description\":\"Inspiration f\u00fcr Businessentscheider\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#organization\",\"name\":\"cloudmagazin\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/cloudmagazin-logo-klein_menu.jpg\",\"contentUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/cloudmagazin-logo-klein_menu.jpg\",\"width\":150,\"height\":150,\"caption\":\"cloudmagazin\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/cloudmagazincom\\\/\",\"https:\\\/\\\/x.com\\\/cloudmagazin\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/cloudmagazin\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#\\\/schema\\\/person\\\/ce38baaa19a580268aedce096597eb3c\",\"name\":\"Alec Chizhik\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/alec-chizhik.jpg\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/alec-chizhik.jpg\",\"contentUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/alec-chizhik.jpg\",\"caption\":\"Alec Chizhik\"},\"description\":\"Alec is the Chief Digital Officer at Evernine and writes about cloud architectures, IT security, and digital operations practices.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/alecchizhik\\\/\"],\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/author\\\/alec\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Google Gemini in the Enterprise: What the AI Act Mandates","description":"Discover how Google Gemini aligns with the EU AI Act. Vertex AI covers region & logging, while the Deployer handles risk class & FRIA.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/","og_locale":"en_US","og_type":"article","og_title":"Google Gemini in the Enterprise: What the AI Act Mandates","og_description":"Discover how Google Gemini aligns with the EU AI Act. Vertex AI covers region & logging, while the Deployer handles risk class & FRIA.","og_url":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/","og_site_name":"cloudmagazin","article_publisher":"https:\/\/www.facebook.com\/cloudmagazincom\/","article_published_time":"2026-05-23T09:09:43+00:00","article_modified_time":"2026-06-22T16:29:38+00:00","og_image":[{"width":1880,"height":1058,"url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/05\/google-gemini-im-unternehmen-was-der-ai-act-erzwingt-cover-hero-2.jpg","type":"image\/jpeg"}],"author":"Alec Chizhik","twitter_card":"summary_large_image","twitter_creator":"@cloudmagazin","twitter_site":"@cloudmagazin","twitter_misc":{"Written by":"Alec Chizhik","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/#article","isPartOf":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/"},"author":{"name":"Alec Chizhik","@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/person\/ce38baaa19a580268aedce096597eb3c"},"headline":"Google Gemini in the Enterprise: What the AI Act Mandates","datePublished":"2026-05-23T09:09:43+00:00","dateModified":"2026-06-22T16:29:38+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/"},"wordCount":885,"publisher":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#organization"},"image":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/05\/google-gemini-im-unternehmen-was-der-ai-act-erzwingt-cover-hero-2.jpg","articleSection":["Guides","News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/","url":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/","name":"Google Gemini in the Enterprise: What the AI Act Mandates","isPartOf":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/#primaryimage"},"image":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/05\/google-gemini-im-unternehmen-was-der-ai-act-erzwingt-cover-hero-2.jpg","datePublished":"2026-05-23T09:09:43+00:00","dateModified":"2026-06-22T16:29:38+00:00","description":"Discover how Google Gemini aligns with the EU AI Act. Vertex AI covers region & logging, while the Deployer handles risk class & FRIA.","breadcrumb":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/#primaryimage","url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/05\/google-gemini-im-unternehmen-was-der-ai-act-erzwingt-cover-hero-2.jpg","contentUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/05\/google-gemini-im-unternehmen-was-der-ai-act-erzwingt-cover-hero-2.jpg","width":1880,"height":1058,"caption":"KI-generiertes Beitragsbild: Google Gemini im Unternehmen: was der AI Act erzwingt"},{"@type":"BreadcrumbList","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/23\/google-gemini-in-the-enterprise-what-the-ai-act-mandates\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.cloudmagazin.com\/en\/home\/"},{"@type":"ListItem","position":2,"name":"Google Gemini in the Enterprise: What the AI Act Mandates"}]},{"@type":"WebSite","@id":"https:\/\/www.cloudmagazin.com\/en\/#website","url":"https:\/\/www.cloudmagazin.com\/en\/","name":"cloudmagazin","description":"Inspiration f\u00fcr Businessentscheider","publisher":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cloudmagazin.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.cloudmagazin.com\/en\/#organization","name":"cloudmagazin","url":"https:\/\/www.cloudmagazin.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2020\/04\/cloudmagazin-logo-klein_menu.jpg","contentUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2020\/04\/cloudmagazin-logo-klein_menu.jpg","width":150,"height":150,"caption":"cloudmagazin"},"image":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/cloudmagazincom\/","https:\/\/x.com\/cloudmagazin","https:\/\/www.linkedin.com\/showcase\/cloudmagazin\/"]},{"@type":"Person","@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/person\/ce38baaa19a580268aedce096597eb3c","name":"Alec Chizhik","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/03\/alec-chizhik.jpg","url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/03\/alec-chizhik.jpg","contentUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/03\/alec-chizhik.jpg","caption":"Alec Chizhik"},"description":"Alec is the Chief Digital Officer at Evernine and writes about cloud architectures, IT security, and digital operations practices.","sameAs":["https:\/\/www.linkedin.com\/in\/alecchizhik\/"],"url":"https:\/\/www.cloudmagazin.com\/en\/author\/alec\/"}]}},"_links":{"self":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts\/42245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/users\/31"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/comments?post=42245"}],"version-history":[{"count":3,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts\/42245\/revisions"}],"predecessor-version":[{"id":47815,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts\/42245\/revisions\/47815"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/media\/42231"}],"wp:attachment":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/media?parent=42245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/categories?post=42245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/tags?post=42245"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/industry?post=42245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}